chore(deps): bump grpcio from 1.68.1 to 1.81.1 in /scanner-bridge#63
Merged
Merged
Conversation
dependabot
Bot
added
dependencies
Collaborator
|
@dependabot rebase |
Bumps [grpcio](https://github.com/grpc/grpc) from 1.68.1 to 1.81.1. - [Release notes](https://github.com/grpc/grpc/releases) - [Commits](grpc/grpc@v1.68.1...v1.81.1) --- updated-dependencies: - dependency-name: grpcio dependency-version: 1.81.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/pip/scanner-bridge/grpcio-1.81.1
branch
from
01cbc6f to
b08e329
Compare
valdacf
added a commit
that referenced
this pull request
Jun 23, 2026
…72) Two regressions from today's batch of Dependabot bumps, neither caught by PR CI (which builds neither the scanner-bridge image nor the e2e-shell test-runner), surfaced by `make test-e2e-containerized`: 1. scanner-bridge image build failed under `--require-hashes`: "found: setuptools". The grpcio 1.81.1 bump (#63) regenerated requirements.txt without a clean `uv pip compile`, dropping the transitive `setuptools==82.0.1` pin (needed by grpcio-tools) AND the `pyjwt[crypto]==2.13.0` security pin (PYSEC-2026-175/177/178/179). Fix: recompile requirements.txt from requirements.in inside python:3.13-slim — restores both pins, surgical diff (only those two). 2. e2e test-runner build failed: pinned apt versions "not found". The ubuntu 24.04->26.04 bump (#54) changed only the FROM tag; the apt pins (ca-certificates=20240203, curl=8.5.0-2ubuntu10.*, ...) are noble-only. Fix: revert to ubuntu:24.04 LTS (its pins match). Re-pinning for 26.04 is a separate deliberate task. Verified: full `make test-e2e-containerized` green — 917 PASS, 0 FAIL. Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps grpcio from 1.68.1 to 1.81.1.
Release notes
Sourced from grpcio's releases.
... (truncated)
Commits
e84a8a2[Release] Bump version to 1.81.1 (on v1.81.x branch) (#42584)4706d6a[xDS] fix use-after-free in global XdsClient map (#42559)42a6b5b[Core][Release] Update BCR presubmit job definition (#42561)8bdf11e[Release] Bump version to 1.81.0 (on v1.81.x branch) (#42432)0029e06Move all gRPC Session classes to the experimental namespace (#42462)1f18268[CI] Fix Asan thread_stress_test error by reducing thread count (#42424) (#42...ee3fed7Backport MacOS fix cl/917004588 to v1.81.x (#42441)6244f3b[Release] Bump version to 1.81.0-pre1 (on v1.81.x branch) (#42378)1108777[Release] Bump core version to 54.0.0 for upcoming release (#42321)74940e8[fix] Add back the do-while loop that handles the TSI_RESULT correctly.